CVE-2023-26300

HIGH

HP PC Products - Privilege Escalation

Title source: llm
STIX 2.1

Description

A potential security vulnerability has been identified in the system BIOS for certain HP PC products which might allow escalation of privilege. HP is releasing firmware updates to mitigate the potential vulnerability.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0013
EPSS Percentile 32.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (50)
hp/200_g4_22_all-in-one_pc_\(rom_family_ssid_86f0\)_firmware < f.50
hp/200_g4_22_all-in-one_pc_\(rom_family_ssid_86f2\)_firmware < f.50
hp/200_g4_22_all-in-one_pc_\(rom_family_ssid_86f3\)_firmware < f.50
hp/200_pro_g4_22_all-in-one_pc_\(rom_family_ssid_86f0\)_firmware < f.50
hp/200_pro_g4_22_all-in-one_pc_\(rom_family_ssid_86f2\)_firmware < f.50
hp/200_pro_g4_22_all-in-one_pc_\(rom_family_ssid_86f3\)_firmware < f.50
hp/205_g4_22_all-in-one_pc_\(rom_family_ssid_86f0\)_firmware < f.50
hp/205_g4_22_all-in-one_pc_\(rom_family_ssid_86f2\)_firmware < f.50
hp/205_g4_22_all-in-one_pc_\(rom_family_ssid_86f3\)_firmware < f.50
hp/205_g8_24_all-in-one_pc_\(rom_family_ssid_8923\)_firmware < f.20
... and 40 more
Published Oct 18, 2023
Tracked Since Feb 18, 2026